Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f954f638-4c8a-3dfa-bbc8-ddb3c5cbbb59.roa
File: f954f638-4c8a-3dfa-bbc8-ddb3c5cbbb59.roa (raw, json)
Hash identifier: 5AQxP2+WKTkX4tzTs0VtSjm/GHV/d015OxFweYgKw8A=
Subject key identifier: 19:5B:07:8C:4C:86:63:0E:CB:4E:38:67:C2:13:10:E2:50:8B:19:D8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F94BAC1E28D980066431C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f954f638-4c8a-3dfa-bbc8-ddb3c5cbbb59.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33662
IP address blocks: 76.142.20.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f9:4b:ac:1e:28:d9:80:06:64:31:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=3900b5f5-fa21-4b12-a632-1ecc7df4aaee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3c:6c:87:de:ef:fe:6e:f7:09:b1:c7:e4:d4:
8c:3a:01:c9:80:a5:df:60:ea:34:c9:c0:cf:2f:fb:
35:31:e9:29:a7:58:b8:fb:1e:55:d9:01:d1:ca:cb:
67:6d:a9:68:04:0a:81:01:d2:f3:a4:af:e2:6f:d9:
fe:c0:0f:79:73:d0:2c:a6:85:67:c2:cf:6b:32:31:
1e:f1:d5:03:8e:06:f9:4e:7d:09:ee:27:e8:55:99:
01:18:0b:c8:5a:aa:94:ff:71:4a:dd:21:b1:33:31:
1e:12:92:a4:27:bb:38:72:4a:48:0e:c1:3a:0d:92:
42:46:02:98:44:80:a5:92:c8:44:2d:cf:d7:b0:8b:
44:2b:89:32:37:45:be:20:62:11:3a:39:20:06:32:
c9:18:3b:57:7f:23:c3:84:37:ab:a4:23:3d:31:9d:
63:59:e2:43:63:f9:3d:5d:8f:03:d5:38:fb:55:a3:
48:92:74:58:6c:b6:94:c6:65:11:c2:84:32:78:62:
e3:bb:7f:63:10:f1:52:29:0a:12:bd:71:d0:ca:3b:
a5:c1:54:d2:d4:5f:26:c8:98:28:35:d1:51:00:79:
db:1c:ef:3e:72:91:c4:10:fc:41:21:1f:24:6d:90:
58:4b:fb:24:05:06:78:25:ec:04:b3:d3:c7:ad:61:
e7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:5B:07:8C:4C:86:63:0E:CB:4E:38:67:C2:13:10:E2:50:8B:19:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f954f638-4c8a-3dfa-bbc8-ddb3c5cbbb59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.142.20.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:d2:1d:39:3f:fe:73:d0:ec:b5:1f:f4:a9:c2:9b:4f:2a:94:
aa:2a:6b:4c:c9:55:10:c0:3e:5e:a9:e7:1e:df:a9:63:6c:d2:
98:b5:09:c1:b1:fa:71:e8:44:f9:56:44:59:26:71:ac:15:73:
c3:16:f5:76:bd:d3:d0:4a:7f:96:cf:44:a0:91:64:81:1f:62:
a3:ee:ad:be:ee:17:34:39:e5:f7:5e:02:0d:8f:5c:38:9b:0d:
33:a7:ff:f0:63:15:f4:08:c2:3d:d0:95:4e:eb:51:d1:5a:b2:
4f:d8:ec:f7:19:d2:ee:90:e6:79:b7:2b:2e:82:56:54:6a:6b:
95:66:12:3c:d6:d1:36:be:2e:ca:b6:1c:b7:67:a7:0d:49:6d:
52:23:96:91:4e:c3:d4:35:1d:4d:0e:cc:62:15:d1:e4:0e:8e:
b6:25:31:de:06:21:22:b2:d9:62:22:e1:3e:0b:5e:11:f4:56:
4b:a3:ac:c0:03:c5:85:40:5f:3e:36:15:61:88:3d:f3:f3:58:
92:ac:17:01:c7:b3:3d:6f:30:f4:dd:3a:79:b4:99:03:58:98:
dd:51:3e:b2:bf:29:ac:6a:84:aa:49:43:55:0f:e0:54:11:b9:
f9:e6:ff:72:cc:a8:06:da:57:78:fc:8e:83:27:56:a1:f7:84:
fd:eb:a1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:14:30 2025 by rpki-client